Secure Pages not working

I can't tell for sure from your description what your problem is, but one thing to note is that Drupal will often send you to your site's base URL (e.g. on login), so I always make sure that my settings.php is set up like this:

$base_url = 'http://mydrupalsite.org'; if (isset($_SERVER['HTTPS']) && $_SERVER['H
TTPS'] == 'on') { $base_url = preg_replace('/http[s]?:\/\//i', 'https://', $base
_url); }

The other thing you should be particularly aware of is that Secure Pages all by itself is security theatre, because Drupal will set session cookies that are visible in http requests that attackers can use to hijack sessions. There are two easy ways around this: 1) use https only (secure pages not needed) or 2) use Secure Pages along with the "Secure Pages Hijack Prevention" module, which adds a second cookie that is only transmitted via https. This keeps you logged in from https -> http -> https transitions (which wouldn't happen if the login session cookie was https only), but also prevents hijacking because the second cookie must be set correctly or the attacker will be logged out.

With those two configuration steps, I usually leave the actual redirection function of Secure Pages alone. The redirection pretty much works for me, so I'm sorry to say I don't have a good idea as to why it does not for you.

Good luck,

- Greg

I had the exact same problem, strangely enough I corrected it by checking "Make secure every page except the listed pages." instead of "Make secure only the listed pages." I still had listed the pages I wanted secured even though I had select the "except the listed pages". It is though it is the opposite of what it should be. Still doesn't switch back to http pages correctly. For me it is better to have every page secured than none.

If you have an editor (e.g., CKEditor), ensure you are editing in plain text mode so that you don't get the extra p tags. Switch to plain text mode and remove any such tags.